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(54) Cryptosystem-related method and apparatus 

(57) Bits of a first bit sequence are rearranged in a 
first matrix according to a.predetemiined arrangement 
rule. The first bit sequence represents Information being 
a base of a key. Blocks are formed in the first matrix. 
Each of the blocks has bits, the number of which is 
smaller than the number of bits composing the first ma- 
trix. Logical operation is executed among bits in each of 
the blocks, and a bit being a result of the logical opera- 
tion is generated. The logical-operation-result bits are 
combined into a second bit sequence. The number of 
bits composing the second bit sequence is smaller than 
the number of bits composing the first bit sequence. 
There is a second matrix composed of predetermined 
third bit sequences. The second matrix is accessed and 
one is read out from among the third bit sequences in 
response to the second bit sequence. The read-out third 
bit sequence is outputted as infonnation representative 
of the key. The number of bits composing each of the 
third bit sequences is smaller than the number of bits 
composing the second bit sequence. 
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Description 

[0001 ] This invention relates to a method of generat- 
ing key Infomnation. Also, this invention relates to an ap- 
paratus for generating key information. In addition, this 
Invention relates to a method of encrypting contents In- 
formation. Furthemnore, this invention relates to an ap- 
paratus for encrypting contents information. Also, this 
Invention relates to a method of decrypting contents In- 
formation. In addition, this Invention relates to an appa- 
ratus for decrypting contents infomnation. Furthemnore, 
this invention relates to a recording medium. Also, this 
invention relates to a method of transmitting contents 
infomnation. 

[0002] In a known system for protecting the copyright 
of digital contents information, a provider side encrypts 
the digital contents infomnation In response to an en- 
cryption key. In some cases, the encryption-resultant 
contents Information Is recorded on a recording medium 
such as a magnetic tape, a magnetic disc, an optical 
disc, or a memory card. In other cases, the encryption- 
resultant contents information Is transmitted through a 
communication network. A user side of the known sys- 
tem receives the encryption-resultant contents informa- 
tion from the recording medium or the communication 
network. The user side decrypts the encryption-result- 
ant contents Infonnation into the original contents infor- 
mation in response to a decryption key equivalent to the 
encryption key. 

[0003] A conventional DES (Data Encryption Stand- 
ard) system encrypts every 64-blt block of an Input data 
into a 64-bit encrypt! on- resultant block in response to a 
64-bit encryption key. Since 8 bits among the 64 bits are 
used for parities, the encryption key has 56 effective 
bits. The conventional DES system uses an S-Box {a 
Selection-Box) which outputs a 4-bit data piece in re- 
sponse to every 6-blt Input data piece according to a 
one-way hash function. Thus, the S-Box implements da- 
ta compression. The S-Box in the conventional DES 
system lacks fiexibility regarding a data compression 
rate. 

[0004] it is a first object of this invention to provide an 
improved method of generating key Infomnation. 
[0005] It Is a second object of this invention to provide 
an improved apparatus for generating key infomnation. 
[0006] It is a third object of this invention to provide 
an improved method of encrypting contents information. 
[0007] It is a fourth object of this invention to provide 
an improved apparatus for encrypting contents informa- 
tion. 

[0008] It is a fifth object of this invention to provide an 
improved method of decrypting contents information. 
[0009] It is a sixth object of this invention to provide 
an improved apparatus for decrypting contents Informa- 
tion. 

[001 0] It is a seventh object of this invention to provide 

an Improved recording medium. 

[001 1] It is an eighth object of this invention to provide 



an improved method of transmitting contents Infomna- 
tion. 

[001 2] A first aspect of this invention provides a meth- 
od of generating key Infonnation. The method compris- 

5 es the steps of rearranging bits of a first bit sequence in 
a first matrix according to a predetennined arangement 
mie, the first bit sequence representing Infonnation be- 
ing a base of a key; forming blocks in the first matrix, 
wherein each of the blocks has bits, the number of which 

10 is snnailer than the number of bits composing the first 
matrix; executing logical operation among bits in each 
of the blocks and generating a bit being a result of the 
logical operation; combining the logical-operation-result 
bits into a second bit sequence, wherein the number of 

IS bits composing the second bit sequence is smaller than 
the number of bits composing the first bit sequence; and 
accessing a second matrix composed of predetennined 
third bit sequences and reading out one from among the 
third bit sequences In response to the second bit se- 

20 quence, and outputting the read-out third bit sequence 
as information representative of the key, wherein the 
number of bits composing each of the third bit sequenc- 
es is smaller than the number of bits composing the sec- 
ond bit sequence. 

25 [001 3] A second aspect of this invention provides an 
apparatus for generating key infonnation. The appara- 
tus comprises means for rearranging bits of a first bit 
sequence In a first matrix according to a predetennined 
anrangement rule, the first bit sequence representing in- 

30 fomnation being a base of a key; means for fomning 
blocks In the first matrix, wherein each of the biocks has 
bits, the number of which is smaller than the number of 
bits composing the first matrix; means for executing log- 
ical operation among bits In each of the blocks and gen- 

35 eratlng a bit being a result of the logical operation; 
means for combining the logical-operation-result bits in- 
to a second bit sequence, wherein the number of bits 
composing the second bit sequence is smaller than the 
number of bits composing the first bit sequence; and 

40 means for accessing a second matrix composed of pre- 
detennined third bit sequences and reading out one 
from among the third bit sequences in response to the 
second bit sequence, and outputting the read-out third 
bit sequence as Infonnation representative of the key, 

45 wherein the number of bits composing each of the third 
bit sequences is smaller than the number of bits com- 
posing the second bit sequence. 
[0014] A third aspect of this invention provides a 
method of encrypting contents infonnation. The method 

50 comprises the steps of generating a signal representa- 
tive of a key from infonnation being a base of the key, 
the key base information Including a first bit sequence; 
and encrypting contents infonnation in response to the 
key signal. The generating step comprises 1) rearrang- 

55 ing bits of the first bit sequence in a first matrix according 
to a predetermined arrangement rule; 2) forming biocks 
in the first matrix, wherein each of the blocks has bits, 
the number of which is smaller than the number of bits 



2 



3 



EP1 119 130 A2 



4 



composing the first matrix; 3) executing logical opera- 
tion among bits in each of the blocks and generating a 
bit being a result of the logical operation; 4) combining 
the iogical-operation-result bits into a second bit se- 
quence, wherein the number of bits composing the sec- 
ond bit sequence is smaller than the number of bits com- 
posing the first bit sequence; and 5) accessing a second 
matrix composed of predetemiined third bit sequences 
and reading out one from among the third bit sequences 
in response to the second bit sequence, and outputting 
the read-out third bit sequence as the key signal, where- 
in the number of bits composing each of the third bit se- 
quences is smaller than the number of bits composing 
the second bit sequence. 

[0015] A fourth aspect of this invention provides an 
apparatus for encrypting contents infomr.ation. The ap- 
paratus comprises means for generating a signal repre- 
sentative of a key from infonnation being a base of the 
key, the key base infomnation Including a first bit se- 
quence; and means for encrypting contents infonnation 
In response to the key signal. The generating means 
comprises 1) means for rearranging bits of the first bit 
sequence in a first matrix according to a predetermined 
arrangement rule; 2) means for forming blocks in thefirst 
matrix, wherein each of the blocks has bits, the number 
of which Is smaller than the number of bits composing 
the first matrix; 3) means for executing logical operation 
among bits In each of the blocks and generating a bit 
being a result of the logical operation; 4) means for com- 
bining the iogical-operation-result bits into a second bit 
sequence, wherein the number of bits composing the 
second bit sequence is smaller than the number of bits 
composing the first bit sequence; and 5) means for ac- 
cessing a second matrix composed of predetermined 
third bit sequences and reading out one from among the 
third bit sequences in response to the second bit se- 
quence, and outputting the read-out third bit sequence 
as the key signal, wherein the number of bits composing 
each of the third bit sequences is smaller than the 
number of bits composing the second bit sequence. 
[001 6] A fifth aspect of this invention provides a meth- 
od of decrypting contents information. The method com- 
prises the steps of generating a signal representative of 
a key from Infonnation being a base of the key, the key 
base information including a first bit sequence; and de- 
crypting encryption-resultant contents infomnation in re- 
sponse to the key signal. The generating step comprises 
1 ) rearranging bits of the first bit sequence in a first ma- 
trix according to a predetermined arrangement rule; 2) 
fomning blocks in the first matrix, wherein each of the 
blocks has bits, the number of which is smaller than the 
number of bits composing the first matrix; 3) executing 
logical operation among bits in each of the blocks and 
generating a bit being a result of the logical operation; 
4) combining the logical-operation-result bits into a sec- 
ond bit sequence, wherein the number of bits compos- 
ing the second bit sequence is smaller than the number 
of bits composing the first bit sequence; and 5) access- 



ing a second matrix composed of predetermined third 
bit sequences and reading out one from among the third 
bit sequences in response to the second bit sequence, 
and outputting the read-out third bit sequence as the key 
5 signal, wherein the number of bits composing each of 
the third bit sequences is smaller than the number of 
bits composing the second bit sequence. 
[001 7] A sixth aspect of this invention provides an ap- 
paratus for decrypting contents Infomnation. The appa- 

10 ratus comprises means for generating a signal repre- 
sentative of a key from information being a base of the 
key. the key base information including a first bit se- 
quence; and means for decrypting encryption-resultant 
contents infonnation in response to the key signal. The 

15 generating means comprises 1) means for rearranging 
bits of the first bit sequence in a first matrix according 
to a predetermined arrangement rule; 2) means for 
forming blocks in the first matrix, wherein each of the 
blocks has bits, the number of which is smaller than the 
number of bits composing the first matrix; 3) means for 
executing logical operation among bits in each of the 
blocks and generating a bit being a result of the logical 
operation; 4) means forcombining the logical-operation- 
result bits into a second bit sequence, wherein the 

2s number of bits composing the second bit sequence is 
smaller than the number of bits composing the first bit 
sequence; and 5) means for accessing a second matrix 
composed of predetermined third bit sequences and 
reading out one from among the third bit sequences in 

30 response to the second bit sequence, and outputting the 
read-out third bit sequence as the key signal, wherein 
the number of bits composing each of the third bit se- 
quences is smaller than the number of bits composing 
the second bit sequence. 

35 [0018] A seventh aspect of this invention provides a 
recording medium storing encryption-resultant key base 
information and encryption-resultant contents Infonna- 
tion generated by the method in the third aspect of this 
invention. 

40 [0019] An eighth aspect of this Invention provides a 
method of transmitting contents information. The meth- 
od comprises the steps of transmitting encryption-re- 
sultant key base infonnation through a transmission 
line, and transmitting encryption-resultant contents in- 

^ fonnation through the transmission line, the encryption- 
resultant contents information being generated by the 
method in the third aspect of this Invention. 
[0020] A ninth aspect of this invention provides a 
method of generating key Infonnation. The method com- 

50 prises the steps of dividing a first bit sequence into sec- 
ond bit sequences, the first bit sequence being con- 
tained in information being a base of a key, wherein the 
number of bits composing each of the second bit se- 
quences is smaller than the number of bits composing 

55 the first bit sequence; sequentially accessing a first ma- 
trix composed of predetermined data pieces and se- 
quentially reading out ones from among the predeter- 
mined data pieces in response to the second bit se- 
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quences; combining the read-out data pieces into a third 
bit sequence, wherein the number of bits composing the 
third bit sequence is smaller than the number of bits 
composing the first bit sequence; rean-angjng bits of at 
least part of the third bit sequence in a second matrix s 
according to a predetermined arrangement rule; forming 
blocks in the second matrix, wherein each of the blocks 
has bits, the number of which is smaller than the number 
of bits composing the second matrix; executing logical 
operation among bits in each of the blocks and gener- 
ating a bit being a result of the logical operation; and 
combining the logicai-operation-result bits into a fourth 
bit sequence, and outputting the fourth bit sequence as 
at least part of infonmation representative of the key, 
wherein the number of bits composing the fourth bit se- 
quence is smaller than the number of bits composing 
the second matrix. 

[0021] A tenth aspect of this invention provides an ap- 
paratus for generating key infomiation. The apparatus 
comprises means for dividing a first bit sequence into 
second bit sequences, the first bit sequence being con- 
tained In infomnation being a base of a key, wherein the 
number of bits composing each of the second bit se- 
quences is smaller than the number of bits composing 
the first bit sequence; means for sequentially accessing 
a first matrix composed of predetennined data pieces 
and sequentially reading out ones from among the pre- 
detennined data pieces in response to the second bit 
sequences; means for combining the read-out data 
pieces into a third bit sequence, wherein the number of 
bits composing the third bit sequence is smaller than the 
number of bits composing the first bit sequence; means 
for rearranging bits of at least part of the third bit se- 
quence in a second matrix according to a predetemnlned 
arrangement rule; means forfomning blocks in the sec- 
ond matrix, wherein each of the blocks has bits, the 
number of which is smaller than the number of bits com- 
posing the second matrix; means for executing logical 
operation among bits in each of the blocks and gener- 
ating a bit being a result of the logical operation; and 
means for combining the logical-operation-result bits in- 
to a fourth bit sequence, and outputting the fourth bit 
sequence as at least part of information representative 
of the key, wherein the number of bits composing the 
fourth bit sequence is smaller than the number of bits 
composing the second matrix. 

[0022] An eleventh aspect of this invention provides 
a method of encrypting contents information. The meth- 
od comprises the steps of generating a signal represent- 
ative of a key from infonnation being a base of the key, 
the key base information including a first bit sequence; 
and encrypting contents infonmation fn response to the 
key signal. The generating step comprises 1) dividing 
the first bit sequence into second bit sequences, where- 
in the number of bits composing each of the second bit 
sequences is smaller than the number of bits composing 
the first bit sequence; 2) sequentially accessing a first 
matrix composed of predetermined data pieces and se- 



quentially reading out ones from among the predeter- 
mined data pieces in response to the second bit se- 
quences; 3) combining the read-out data pieces into a 
third bit sequence, wherein the number of bits compos- 
ing the third bit sequence is smaller than the number of 
bits composing the first bit sequence; 4) rean-anging bits 
of at least part of the third bit sequence in a second ma- 
trix according to a predetennined arrangement mle; 5) 
forming blocks in the second matrix, wherein each of the 
blocks has bits, the number of which Is smallerthan the 
number of bits composing the second matrix; 6) execut- 
ing logical operation among bits in each of the blocks 
and generating a bit being a result of the logical opera- 
tion; and 7) combining the logical-operation-result bits 
into a fourth bit sequence, and outputting the fourth bit 
sequence as at least part of the key signal. 
[0023] A twelfth aspect of this invention provides an 
apparatus for encrypting contents Information. The ap- 
paratus comprises means for generating a signal repre- 
sentative of a key from infonnatiori being a base of the 
key, the key base information including a first bit se- 
quence; and means for encrypting contents infonnation 
in response to the key signal. The generating means 
comprises 1) means for dividing the first bit sequence 
into second bit sequences, wherein the number of bits 
composing each of the second bit sequences is smaller 
than the number of bits composing the first bit sequence; 
2) means for sequentially accessing a first matrix com- 
posed of predetermined data pieces and sequentially 
reading out ones from among the predetemnlned data 
pieces in response to the second bit sequences; 3) 
means for combining the read-out data pieces into a 
tiiird bit sequence, wherein the number of bits compos- 
ing the third bit sequence is smaller than the number of 
bits composing the first bit sequence; 4) means for re- 
arranging bits of at least part of the third bit sequence 
in a second matrix according to a predetermined ar- 
rangement mie; 5) means for forming blocks in the sec- 
ond matrix, wherein each of the blocks has bits, the 
number of which is smallerthan the number of bits com- 
posing the second matrix; 6) means for executing logical 
operation among bits in each of the blocks and gener- 
ating a bit being a result of the logical operation; and 7) 
means for combining the iogical-operation-result bits in- 
to a fourth bit sequence, and outputting the fourth bit 
sequence as at least part of the key signal. 
[0024] A tiiirteenth aspect of this invention provides a 
method of decrypting contents information. The method 
comprises the steps of generating a signal representa- 
tive of a key from infonnation being a base of the key, 
the key base infonnation including a first bit sequence; 
and decrypting encryption-resultant contents informa- 
tion in response to the key signal. The generating step 
comprises 1 ) dividing the first bit sequence Into second 
bit sequences, wherein the number of bits composing 
each of the second bit sequences is smaller than the 
number of bits composing the first bit sequence; 2) se- 
quentially accessing a first matrix composed of prede- 
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termined data pieces and sequentially reading out ones 
from among the predetemnined data pieces In response 
to the second bit sequences; 3) combining the read-out 
data pieces into a third bit sequence, wherein the 
number of bits composing the third bit sequence is 
smaller than the number of bits composing the first bit 
sequence; 4) rearranging bits of at least part of the third 
bit sequence in a second matrix according to a prede- 
termined an^ngement rule; 5) fonning blocks In the sec- 
ond matrix, wherein each of the blocks has bits, the 
number of which is smaller than the number of bits com- 
posing the second matrix; 6) executing logical operation 
among bits In each of the blocks and generating a bit 
being a result of the logical operation; and 7) combining 
the logicai-operation-result bits into a fourth bit se- 
quence, and outputting the fourth bit sequence as at 
least part of the key signal. 

[0025] A fourteenth aspect of this invention provides 
an apparatus for decrypting contents infonmation. The 
apparatus comprises means for generating a signal rep- 
resentative of a key from information being a base of the 
key, the key base information including a first bit se- 
quence; and means for decrypting encryption-resultant 
contents information in response to the key signal. The 
generating means comprises 1) means for dividing the 
first bit sequence into second bit sequences, wherein 
the number of bits composing each of the second bit 
sequences Is smatlerthan the number of bits composing 
the first bit sequence; 2) means for sequentially access- 
ing a first matrix composed of predetermined data piec- 
es and sequentially reading out ones from among the 
predetermined data pieces in response to the second 
bit sequences; 3) means for combining the read-out da- 
ta pieces into a third bit sequence, wherein the number 
of bits composing the third bit sequence is smaller than 
the number of bits composing the first bit sequence; 4) 
means for rean-anging bits of at least part of the third bit 
sequence In a second matrix according to a predeter- 
mined arrangement rule; 5) means for fonning blocks in 
the second matrix, wherein each of the blocks has bits, 
the number of which is smaller than the number of bits 
composing the second matrix; 6) means for executing 
logical operation among bits in each of the blocks and 
generating a bit being a result of the logical operation; 
and 7) means for combining the logical-operation-result 
bits into a fourth bit sequence, and outputting the fourth 
bit sequence as at least part of the key signal. 
[0026] A fifteenth aspect of this invention provides a 
recording medium storing encryption-resultant key base 
information and encryption-resultant contents informa- 
tion generated by the method in the eleventh aspect of 
this invention. 

[0027] A sixteenth aspect of this invention provides a 
method of transmitting contents infomiation. The meth- 
od comprises the steps of transmitting encryption-re- 
sultant key base infomnation through a transmission 
line, and transmitting encryption-resultant contents in- 
formation through the transmission line, the encryption- 



resultant contents information being generated by the 
method in the eleventh aspect of this invention. 
[0028] Fig. 1 is a diagram of a prior-art S-Box. 
[0029] Fig. 2 is a block diagram of a system for con- 
5 tents information according to a first embodiment of this 
invention. 

[0030] Rg. 3 is a flow diagram of operation of a cal- 
culator (a key generator) in Fig. 2. 
[0031] Fig. 4 is a block diagram of the calculator in 
10 Fig. 2. 

[0032] Fig. 5 is a block diagram of a system for con- 
tents infomnation according to a second embodiment of 
this Invention. 

[0033] Fig. 6 is a flow diagram of operation of a cal- 
15 culator (a key generator) in Fig. 5. 

[0034] Fig. 7 is a block diagram of the calculator in 
Fig. 5. 

[0035] A prior-art S-Box will be explained below for a 
better understanding of this invention. 

^ [0036] Rg. 1 shows an S-Box 50 In a prior-art DES 
system. The S-Box 50 outputs a 4-bit data piece in re- 
sponse to every 6-bit input data piece according to a 
one-way hash function "Fix)". Thus, the S-Box 50 im- 
plements data compression. The 6 bits in every input 

2s data piece are denoted by b^, h^, b^, b2, b^» and bo, re- 
spectively. 

[0037] The one-way hash function is designed to 
meet the following conditions. It Is easy to calculate the 
value "F(x)" from the value "x". it is difficult to calculate 
30 the value "x" from the value "F(x)". 

[0036] The S-Box 50 includes a memory 50T storing 
data representing a two-dimensional table being a ma- 
trix of predetermined 4-bit data pieces. Specifically, the 
matrix has 4 rows by 16 columns. Four different states 
35 of a 2-blt signal are assigned to the rows in the matrix, 
respectively. Sixteen different states of a 4-bit signal are 
assigned to the columns in the matrix, respectively. 
[0039] The S-Box 50 separates the 6 bits of every in- 
put data piece into first and second groups. The first 
40 group has bits b^ and bQ. The second group has bits b4. 
b3, b2. and b^. The first group (bits b^ and bg) is used as 
a 2-bit signal for designating one from among the rows 
in the matrix. The second group (bits b4. b3, b2, and b^) 
is used as a 4-bit stgnai for designating one from among 
45 the columns in the matrix. A 4-bit predetemnined data 
piece is read out from an element position In the matrix 
which coincides with the Intersection of the designated 
row and column. The S-Box 50 outputs the read-out 
4-bit data piece. 
50 [0040] For example, an input data piece being 
"1 001 00" is separated into a 2-bit signal of "1 0" (bits bs 
and bo) and a 4-blt signal of "0010" (bits b^, bg, bg, and 
b^). The 2-bit signal of "10" designates corresponding 
one of the rows in the matrix. The 4-bit signal of "001 0" 
55 designates corresponding one of the columns in the ma- 
trix. A predetermined 4-bit data piece being "1001" re- 
sides in an element position in the matrix which coin- 
cides with the intersection of the designated row and col- 
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umn. Thus, the 4-bit data piece "1 001 " is read out from 
the matrix before being outputted from the S-Box 50. 
[0041] The S-Box 50 in the prior-art DES system is 
able to implement onfy 6-to-4 bit data reduction (com- 
pression). Accordingly, the S-Box 50 iacl© flexibility re- s 
garding a data compression rate. 

First Embodiment 

[0042] Fig. 2 shows a system for contents information to 
according to a first embodiment of this Invention. The 
system of Rg. 2 includes a primary section P, a second- 
ary section Q, and an intemriediate section R. The pri- 
mary section P and the secondary section Q are con- 
nected to each other via the intemnediate section R. is 
[0043] The primary section P includes an Information 
recording apparatus or an infomnation transmitting ap- 
paratus. The secondary section Q includes an informa- 
tion reproducing apparatus or an Infomriatlon receiving 
apparatus. An example of the information reproducing 20 
apparatus is an information player. The intermediate 
section R includes a recording medium or a transmis- 
sion medium. Examples of the recording medium are a 
magnetic tape, a magnetic disc, an optical disc, and a 
memory card. Examples of the transmission medium 2s 
are a communication network, a radio transmission line, 
and an optical transmission line. The communication 
networl^ Is, for example, the Internet or a telephone net- 
work. The transmission medium is also referred to as a 
transmission line. 

[0044] The primary section P Includes an encryptor 2. 
a calculator or a key generator 3, and an encryptor 5. 
The calculator 3 receives information being a base of a 
first key K1 . The first-key base information is fed from a 
suitable device (not shown). The calculator 3 generates 35 
a signal (data) representative of the first key K1 from the 
first-key base infonnation according to a predetemiined 
one-way hash function. The calculator 3 outputs the 
first-key signal (the first-key data) to the encryptor 5. 
Preferably, the number of bits composing the first-key 40 
signal is significantly smaller than that of bits composing 
the first-key base infomiation. 
[0045] The encryptor 5 receives digital contents Infor- 
mation from a suitable device (not shown). The contents 
infomfiation includes a video signal, an audio signal, or 45 
an audio video signal representing copyrighted con- 
tents. The encryptor 5 encrypts the received contents 
infonnation into encryption-resultant contents informa- 
tion in response to the first-key signal. The encryptor 5 
outputs the encryption-resultant contents infonnation to so 
the intemriediate section R. 

[0046] Specifically, the primary section P records the 
encryption-resuttant contents infonnation on the record- 
ing medium of the intermediate section R, or transmits 
the encryption-resultant contents information to the ss 
transmission line of the Intemriediate section R. 
[0047] A signal (data) representative of a second key 
K2 is available in the primary section P. The second-key 
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signal is fed from a suitable device (not shown) . The sec- 
ond key K2 is peculiar to the system. Thus, the second 
key K2 is also referred to as the system key K2. For ex- 
ample, the second key K2 is based on identification (ID) 
information of the system. The second key K2 differs 
from the first key K1 . The second key K2 may be equal 
to the first key K1. 

[0048] The encryptor 2 receives the first-key base in- 
formation and also the second-key signal. The encryptor 
2 encrypts the first-key base infonnation into encryption- 
resuttant first-key base Infomrtation in response to the 
second-key signal. The encryptor 2 outputs the encryp- 
tion-resultant first-key base infomnatlon to the interme- 
diate section R. 

[0049] Specifically, the primary section P records the 
encryptlon-resultantflrst-key base information on the re- 
cording medium of the intermediate section R, or trans- 
mits the encryption-resultant first-key base information 
to the transmission line of the intennedtate section R. 
[0050] The encryption-resultant contents Information 
and the encryption-resultant first-key base Infonnation 
are transmitted from the primary section P to the sec- 
ondary section Q through the intermediate section R. 
[0051 ] The secondary section Q includes a decrypting 
device 8, a calculator or a key generator 10, and a de- 
crypting device 11. A signal (data) representative of a 
second key or a system key K2 is available In the sec- 
ondary section Q. The second-key signal is fed from a 
suitable device (not shown). The second key K2 Is pe- 
culiar to the system. For example, the second key K2 is 
based on identification (ID) infonnation of the system. 
The second key K2 in the secondary section Q is equiv- 
alent to that in the primary section R 
[0052] The decrypting device 8 receives the second- 
key signal. In addition, the decrypting device 8 receives 
the encryption-resultant first-key base Infonnation from 
the intennediate section R. The decrypting device 8 de- 
crypts the encryption-resultant first-key base informa- 
tion into the fir^t-key base information in response to the 
second-key signal. The decrypting device 8 outputs the 
first-key base infonnation to the calculator 10. 
[0053] The calculator 10 generates a signal (data) 
representative of a first key K1 from the first-key base 
infonnation according to a predetemnined one-way hash 
function equal to that used by the calculator 3 in the pri- 
mary section P. The calculator 10 outputs the first-key 
signal (the fiiBt-key data) to the decrypting device 11 . 
The first key K1 generated by the calculator 1 0 is equiv- 
alent to that generated by the calculator 3 in the primary 
section P. 

[0054] The decrypting device 1 1 receives the encryp- 
tion-resultant contents Information from the Intermedi- 
ate section R. The decrypting device 1 1 decrypts the en- 
cryption-resultant contents information Into the original 
digital contents information in response to the first-key 
signal. Thus, the decrypting device 11 reproduces the 
original digital contents infonnation. The decrypting de- 
vice 11 outputs the reproduced digital contents informa- 
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tion. 

[0055] The second key (the system key) K2 in the pri- 
mary section P and that in the secondary section Q may 
be based on a common key cryptosystem. tn this case, 
both the primary section P and the secondary section Q 
use a common key as a system key K2. The second key 
(the system key) K2 in the primary section P and that in 
the secondary section Q may be based on a pubiic-key 
cryptosystem or a key-delivery cryptosystem. 
[0056] The calculator (the key generator) 3 in the pri- 
mary section P and the calculator (the key generator) 
10 in the secondary section Q are similar in design and 
operation. Therefore, only the calculator 3 will be ex- 
plained in more detail. 

[0057] Fig. 3 shows a flow of operation of the calcu- 
lator 3. Fig. 4 shows a structure of the calculator 3. As 
shown in Fig. 3, the flow of operation of the calculator 3 
is divided into first and second steps. The second step 
follows the first step. The operation of the calculator 3 
accords with the predetermined one-way hash function. 
As shown in Fig. 4, the calculator 3 includes a logical 
operation unit 21 and an S-Box (a Selection-Box) 22 
connected to each other. The S-Box 22 Is designed in 
conformity with DES (Data Encryption Standard). 
[0058] With reference to Figs. 3 and 4, the calculator 
3 receives the first-key base information, in the first step 
of Fig. 3, the logical operation unit 21 divides the first- 
key base Infonmation into blocks each having 25 suc- 
cessive bits. Each of the blocks forms a first bit se- 
quence, that is, a sequence of bits alt, a^2' ^13' ^14* ^15* 

a2i. 322, 324, ^25. ^31, 332, 833, 834, 835, a^^, 843, 

843, 844, 845, 85^, 852, 853, 854, and 855. The first and 
second steps of Fig. 3 execute block-by-block signal 
processing. 

[0059] In the first step of Fig. 3, the logical operation 
unit 21 rearranges the bits of each first bit sequence in 
a first matrix M1 according to a predetemiined arrange- 
ment rule equal to that used in the calculator 1 0 of the 
secondary side Q. The first matrix M1 has 5 rows by 5 
columns. Specifically, the first row in the first matrix Ml 
has bits a.,^, a^g* ^13* ^is- "^le second row has 

bits 32^, a22, 823, 824, and 823. The third row has bits 
831, 832, 833, 834, and 835. The fourth row has bits 84^, 
842, 843, 844, and 845. The fifth row has bits ag^ , 852, 853, 
854, and 855. The first column in the first matrix M1 has 
bits a^^, 821, 83^1 84^, and 85^. The second column has 
bits 8^2' ^2' ^32' ^42' ^2* The third column has bits 
3i3. 823, 833, 843, and 853. The fourth column has bits 
814, 824. 834, 844, and 854, The fifth column has bits 8^5, 
825. 835, 845, and 855. 

[0060] In the first step of Fig. 3, the logical operation 
unit 21 sets a movable scanning window In the first ma- 
trix M1 which covers 2-by-2 neighboring elements (bits). 
Initially, the window is located in the uppermost and left- 
most position within the first matrix Ml , covering bits a^^ , 
8^2. 821 , and 322- The logical operation unit 21 executes 
Exclusive-OR operation among the bits a^^, 8^2' ^21, 
and 822- The result of the Exclusive-OR operation is a 



bit b^^. The logical operation unit 21 places the bit b^^ 
in the first-row first-column element position within a 
second matrix M2. As will be made clear later, the sec- 
ond matrix M2 has 4 rows by 4 columns. The window is 

5 shifted rightward from the initial position by one column. 
The resultant window covers bits 8^2' ^^3* ^> 
The logical operation unit 21 executes Exdusive-OR op- 
eration among the bits a^g. 8^3, 822, and 823. The result 
of the Excluslve-OR operation is a bit b^z- The logical 

10 operation unit 21 places the bit ^® first-row sec- 
ond-column element position within the second matrix 
M2. During a subsequent stage, signal processing sim- 
ilar to the above-mentioned signal processing is iterat- 
ed. Specifically, the window is shifted rightward one col- 

is umn by one column, and Exclusive-OR operation is ex- 
ecuted among four bits in the window each time the win- 
dow is in one position. A bit being the result of each Ex- 
clusive-OR operation is placed in a con^esponding ele- 
ment position within the second matrix M2. The window 

20 reaches the uppemiost and rightmost position. When 
signal processing related to the window in tiie upper- 
most and rightmost position is completed, the first row 
in the second matrix M2 is filled with bits b^^, b^2« ^13- 
and b^4. 

25 [0061] Then, the window is shifted to the second-up- 
pennost and leftmost position within the first matrix Ml , 
covering bits 821 , 8221 831, and 832- The logical operation 
unit 21 executes Exclusive-OR operation among the bits 
^21' ^« ^32- The result of the Exclusive-OR 

30 operation is a bit b2i . The logical operation unit 21 plac- 
es the bit b2i in the second-row first-column element po- 
sition within the second matrix M2. The window is shifted 
rightward by one column. The resultant window covers 
bits 8221 823, 832, and 833. The logical operation unit 21 

35 executes Exclusive-OR operation among the bits 822. 
823, 832, and 833. The result of the Exclusive-OR oper- 
ation is a bit b22- The logical operation unit 21 places 
the bit b22 in the second-row second-column element 
position within the second matrix M2. During a subse- 

40 quent stage, signal processing similar to the above- 
mentioned signal processing is iterated. Specifically, the 
window is shifted rightward one column by one column, 
and Exclusive-OR operation is executed among four 
bits In the window each time the window is in one posi- 

<5 tion. A bit being the resutt of each Exclusive-OR opera- 
tion is placed in a corresponding element position within 
the second matrix M2. The window reaches the second- 
uppermost and rightmost position. When signal 
processing related to the window in tiie second-upper- 

so most and rightmost position is completed, the second 
row in the second matrix M2 is filled with bits b2i, b22. 
b23, and b24. 

[0062] Then, the window is shifted to the third-upper- 
most and leftmost position within the first matrix Ml . 
55 During a subsequent stage, signal processing similar to 
the above-mentioned signal processing Is Iterated. Spe- 
cifically, the window is shifted rightward one column by 
one column, and Exclusive-OR operation is executed 
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among four bits in the window each time the window is 
in one position. A bit being the result of each Exclusive- 
OR operation is placed in a con'esponding element po- 
sition within the second matrix M2. Finally, the window 
reaches the lowermost and rightmost position. When 
signal processing related to the window in the lowermost 
and rightmost position is completed, the second matrix 
M2 is filled with bits b^^, bi2. ^^3> b^. ^21, b22. ^23> ^24^ 
b3i, bag, baa, ^a*. ^41. b42, b4a, and b44. In this way, the 
first step of Fig. 3 compresses the first matrix M1 into 
the second matrix M2. In other words, the first step com- 
presses 25 bits (one block) into 16 bits. In the first step 
of Fig. 3, the logical operation unit 21 rearranges the bits 
of the second matrix M2 into a second bit sequence, that 
is, a sequence of bits b^^, b^gr b^a, bi4, b^i, b22> bga, 
b24. bai, b32, baa. ^^4' ^4^^ ^42, b43, and b44. 
[0063] Each ExctusiveOR operation among four bits 
a,j, aq+^, a,^<||, and a,+ij+t in the window is generally ex- 
pressed as follows. 

b,j = a,j e an^., ® a^^^ ® ^i+ij+i C ) 

l.j=1.2,3.4 

where bij denotes a bit being the result of the Exclusive- 
OR operation, and 0 denotes an operator of one unit 
portion of the Exclusive-OR operation. 
[0064] Setting the window in the first matrix M1 and 
shifting the window therein mean fonning bloclcs in the 
first matrix Ml , wherein each of the blocks has bits, the 
number of which is smaller than the number of bits com- 
posing the first matrix M1. Exclusive-OR operation 
among bits in the window means logical operation 
among bits in each of blocks in the first matrix Ml . 
[0065] tt should be noted that the first step may divide 
the first-key base infomiation Into blocks each having 
more than or less than 25 successive bits. The first step 
may rean^nge the bits of each first bit sequence (each 
25-bit sequence) in the first matrix M1 according to a 
predetermined arrangement rule different from the pre- 
viously-mentioned arrangement rule. The first step may 
execute OR operation or AND operation among four bits 
in the window Instead of Exclusive-OR operation. 
[0066] The second step of Fig. 3 relates to the S-Box 
22. The S-Box 22 outputs a 4-bit data piece (a 4-bit se- 
quence) in response to every 8-bit input data piece ac- 
cording to a one-way hash function. Thus, the S-Box 22 
implements data compression. The S-Box 22 includes 
a memory 22T storing data representing a two-dimen- 
sional table being a matrix (an S-Box matrix) of prede- 
temnined 4-bit data pieces or predetermined 4-btt se- 
quences. Specifically, the S-Box matrix has 1 6 rows by 
16 columns. Sixteen different states of a 4-bit signal are 
assigned to the rows in the S-Box matrix, respectively. 
Sixteen different states of a 4-bit signal are assigned to 
the columns in the S-Box matrix, respectively. 
[0067] In a fomner half of the second step of Fig. 3, 



the S-Box 22 selects 8 bits from the second bit sequence 
generated by the first step according to a predetemnined 
selection rule equal to that used in the calculator 10 of 
the secondary side Q. Specifically, the S-Box 22 selects 

5 bits b^^, b^2' bi3, b^4, b2^, b22. b23, and b24 from the 
second bit sequence. Then, the S-Box 22 separates the 
8 selected bits into first and second groups. The first 
group has bits b^^, bi2, b^a. and b^^. The second group 
has bits b2i. b22> b2a, and b24. The first group (bits b^^. 

10 b^2' 1^13' used as a 4-bit signal for designating 

one from among the rows in the S-Box matrix. The sec- 
ond group (bits b2v b22, b23, and b24) is used as a 4-bit 
signal for designating one from among the columns in 
the S-Box matrix. A predetermined 4-bft data piece (a 

15 predetermined 4-bit sequence) is read out from an ele- 
ment position in the S-Box matrix which coincides with 
the intersection of the designated row and column. The 
S-Box 22 outputs the read-out 4-bit data piece as a 4-bit 
portion of the first-key signal (the signal representative 

20 of the first key K1). 

[0068] In a latter half of the second step of Fig. 3, the 
S-Box 22 selects 8 remaining bits, that Is, bits b^^, b^, 
baa. b34. b4,. b42, b43, and b44 from the second bit se- 
quence generated by the first step. Then, the S-Box 22 

25 separates the 8 selected bits into first and second 
groups. The first group has bits ba^, b32. baa, and b34. 
The second group has bits b4i, b42, b4a, and b44. The 
first group (bits bav ba2. baa, ^34) used as a 4-bit 
signal for designating one from among the rows in the 

30 S-Box matrix. The second group (bits b4^. b^, b^Q, and 
b44) is used as a 4-bit signal for designating one from 
among the columns In the S-Box matrix. A predeter- 
mined 4-bit data piece (a predetemnined 4-b(t sequence) 
is read out from an element position in the S-Box matrix 

35 which coincides with the intersection of the designated 
row and column. The S-Box 22 outputs the read-out 
4-bit data piece as another 4-bit portion of the first-key 
signal (the signal representative of the first key K1). In 
this way, the second step of Fig. 3 compresses the sec- 

40 ond bit sequence (the 1 6-blt sequence) into an 8-blt por- 
tion of the first-key signal. Repetition of the previously- 
mentioned signal processing in the first and second 
steps of Fig. 3 completes the first-key signal. 
[0069] It should be noted that the S-Box matrix for the 

45 bits bai. ba2, baa, b34, b4^, 642, b43, and b44 may differ 
from the S-Box matrix for the bits b^^, b^2' biai b^4, bg^. 
b22' b2a> and b24. Each of the data pieces at the respec- 
tive element positions In the S-Box matrix may have a 
predetemnined number of bits which differs from 4. 

so [0070] As understood from the previous description, 
the calculators or the key generators 3 and 10 imple- 
ment 25-to-1 6 bit data reduction (compression) in the 
first step, and implement 16-to-d bit data reduction 
(compression) in the second step. The S-Box 22 may 

S5 fail to process bits ba^, b32, baa, b34, b^^, b42, b4a, and 
b44 In the second bit sequence. In this case, the calcu- 
lators 3 and 10 implement 16-to-4 bit data reduction 
(compression) in the second step. The calculators 3 and 
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10 may process and compress selected one or ones of 
25-bit blocks of the ftrst-key base information. In this 
case, the rate of the compression of the first-key base 
information to generate the first-key signal can be 
changed among different values. The first-key base in- 
formation may have a given number of bits which differs 
from a multiple of 25. In this case, the calculators 3 and 
1 0 divide the first-key base information Into 25-bit blocks 
and one remaining block having bits, the number of 
which differs from 25. The calculators 3 and 10 discard 
the remaining block. Accordingly, the rate of the com- 
pression of the first-key base information to generate 
the first-key signal can be changed among various val- 
ues. Thus, the calculators 3 and 10 are sufficiently flex- 
ible regarding a data compression rate. 
[0071 ] The first embodiment of this invention may be 
modified as follows. Specifically, a modification of the 
first embodiment of this invention implements encryp- 
tion through "n" stages, where "n" denotes a predeter- 
mined natural number equal to or greater than 3. In the 
modification, an n-th encryptor encrypts (n-1)-th key 
base infonmation according to a predetennlned one-way 
function. 

Second Embodiment 

[0072] Fig. 5 shows a system for contents information 
according to a second embodiment of this invention. 
The system of Fig. 5 is similar to the system of Fig. 2 
except for design changes mentioned later. The system 
of Fig. 5 includes a primary section PA and a secondary 
section QA instead of the primary section P and the sec- 
ondary section Q (see Fig. 2), respectively. 
[0073] The primary section PA Is similar to the primary 
section P except that a signal generator (a key genera- 
tor) 3A replaces the signal generator 3 in Fig. 2. The 
secondary section QA is similar to the secondary sec- 
tion Q except that a signal generator (a key generator) 
10A replaces the signal generator 10 in Fig. 2. 
[0074] The calculator (the key generator) 3A In the pri- 
mary section PA and the cateulator (the key generator) 
1 0A In the secondary section QA are similar in design 
and operation. Therefore, only the calculator 3A will be 
explained in more detail. 

[0075] Fig. 6 shows a flow of operation of the calcu- 
lator 3A. Fig. 7 shows a structure of the calculator 3A. 
As shown in Fig. 6, the flow of operation of the calculator 
3A is divided into first and second steps. The second 
step follows the first step. The operation of the calculator 
3A accords with a predetermined one-way hash func- 
tion. As shown in Fig. 7, the calculator 3A includes an 
S-Box (a Selection-Box) 31 and a logical operation unit 
32 connected to each other. The S-Box 31 is designed 
in confomiity with DES. 

[0076] With reference to Figs. 6 and 7, the calculator 
3A receives first-key base Infonnation fomning a first bit 
sequence, for example, a 200-bit sequence. The first 
and second steps of Fig. 6 compressively changes the 



first-key base infomnatlon into a first-key signal (a signal 
representative of a first key). Preferably, the number of 
bits composing the first-key signal is significantly small- 
er than that of bits composing the first-key base Infor- 
5 mation. 

[0077] The first step of Fig. 6 relates to the S-Box 31 . 
The S-Box 31 outputs a 4-bit data piece (a 4-blt se- 
quence) in response to every 6-bit input data piece ac- 
cording to a one-way hash function. Thus, the S-Box 31 
10 Implements data compression. The S-Box 31 includes 
a memory 3 IT storing data representing a two-dimen- 
sional table being a matrix (an S-Box matrix) of prede- 
temnined 4-bit data pieces or predetemnlned 4-blt se- 
quences. Specifically, the S-Box matrix has 16 rows by 
IS 1 6 columns. Sixteen different states of a 4-bit signal are 
assigned to the rows In the S-Box matrix, respectively 
Sixteen different states of a 4-bit signal are assigned to 
the columns in the S-Box matrix, respectively. 
[0078] In the first step of Fig. 6. the S-Box 31 divides 
20 the first-key base information into 25 blocks each having 
8 successive bits. Each of the 8-bit blocks fomis a sec- 
ond bit sequence, that is, a sequence of bits a^, a^, 
^4. as* ^7 • ^8- '^^^ ^^^^ step executes block-by- 
block signal processing. 

[0079] In the first step of Fig. 6, the S-Box 31 sepa- 
rates the 8 bits of first one of the blocks into first and 
second groups. The first group has bits a^, 83, and 
84. The second group has bits a^, a^, ay, and ag. The 
first group (bits a^ , ag, ag, and a^) is used as a 4-bit signal 
for designating one from among the rows in the S-Box 
matrix. The second group (bits 85, a^, Sj, and a^) is used 
as a 4-bit signal for designating one from among the col- 
umns In the S-Box matrix. A predetemnined 4-bit data 
piece (a predetemnined 4-bit sequence) is read out from 
an element position in the S-Box matrix whtoh coincides 
with the intersection of the designated row and column. 
The S-Box 31 outputs the read-out 4-bit data piece as 
a 4-bit portion of a third bit sequence (a 100-bit se- 
quence) which corresponds to the first one of the 8-blt 
blocks. 

[0080] For each of second and later ones of the 8-bit 
blocks, the S-Box 31 executes signal processing similar 
to the above-mentioned signal processing. As a result, 
the S-Box 31 compresses the 25 8-bit blocks Into the 
respective 4-bit portions of the third bit sequence (the 
100-bit sequence). In other words, the S-Box 31 com- 
presses the first bit sequence (the 200-blt sequence) in- 
to the third bit sequence (the 100-bit sequence). 
[0061] It should be noted that the first bit sequence 
formed by the first-key base Information may have a pre- 
detemilned number of bits which differs from 200. Also, 
the second bit sequence may have a predetermined 
number of bits which differs from 6. Furthemiore, each 
of the data pieces at the respective element positions in. 
the S-Box matrix may have a predetermined number of 
bits which differs from 4. In addition, the contents of the 
4-bit data pieces at the respective element positions in 
the S-Box matrix may vary from 8-bit block to 8-bit block. 
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In this case, different S-Box matrixes are provided for 
the 25 8-blt blocks, respectively. Only selected one or 
ones of the 4-bit data pieces read out from the S-Box 
matrix may. be used to fomn the third bit sequence, in 
this case, the number of bits composing the third bit se- 5 
quence differs from 100. 

[0082] In the second step of Fig. 6, the logicat opera- 
tion unit 32 divides the third bit sequence (the 100-bit 
sequence) generated by the first step into blocks each 
having 25 successive bits. Each of the 25-blt blocks io 
forms a fourth bit sequence, that is, a sequence of bits 
bi2. bi3, b^4, bi5, bgi, b22, bga, b24, b25. bg^, bga, 

b33, b34, b35. b4i, b42. b43, b44, b45, bg^, bgg. b53. b54, 

and bss. The second step of Fig. 6 executes signal 
processing on a 25-bit-block by 25-bit-block basis. 
[0083] When the number of bits composing the third 
bit sequence is equal to 25, the third bit sequence is 
directly used as the fourth bit sequence. 
[0084] in the second step of Fig. 6. the logical opera- 
tion unit 32 uses a first matrix Ml and a second matrix 
M2. Specifically, the logical operation unit 32 rearranges 
the bits of each fourth bit sequence in the first matrix Ml 
according to a predetennined arrangement rule equal 
to that used in the calculator 10A of the secondary side 
QA. The first matrix Ml has 5 rows by 6 columns. Spe- 2S 
ciflcally, the first row in the first matrix M1 has bits b^^, 
^12> ^^13' ^14* ^15- '^^^ second row has bits b2i, b22. 
b23, b24, and bgg. The third row has bits b3^ , b32, bgg, 
b34, and 635. The fourth row has bits b^^, b^2' ^a3> '^44' 
and b45. The fifth row has bits b^^ , b^2' ^53' ^S4> ^ss- 
The first column In the first matrix Mi has bits b^^, b2v 
bsi, b4i, and b^^. The second column has bits bi2< ^22> 
b32> b42t and b52. The third column has bits b^3, b23, b33, 
b43, and 653. The fourth column has bits b^4, b24, b34, 
b44, and b54. The fifth column has bits b.15, bgs, bss, b45, 35 
and bgs- 

[0085] In the second step of Fig. 6, the logical opera- 
tion unit 32 sets a movable scanning window in the first 
matrix Ml which covers 2-by-2 neighboring elements 
(bits), initially, the window Is located In the uppemnost 40 
and ieftmost position within the first matrix Ml , covering 
bits b^^, b.,2. b2i. and b22- The logical operation unit 32 
executes Exclusive-OR operation among the bits b^^, 
bt2. b2i. and b22- The result of the Exclusive-OR oper- 
. ation is a bit c^ V The logical operation unit 32 places the 
bit in the first-row first-column element position within 
the second matrix M2. As will be made clear later, the 
second matrix M2 has 4 rows by 4 columns. The window 
is shifted rightward from the initial position by one col- 
umn. The resultant window covers bits b^2. ^13, b22. and so 
b23. The togteai operation unit 32 executes Exclusive- 
OR operation among the bits b^2* ^i3> ^22< ^23- The 
result of tlie Exciusrve-OR operation Is a bit 0^2- The log- 
ical operation unit 32 places the bit 0^2 first-row 
second-column element position within the second ma- ss 
trix M2. During a subsequent stage, signal processing 
similar to the above-mentioned signal processing is it- 
erated. Specifically, the window is shifted rightward one 



column by one column, and Exclusive-OR operation is 
executed among four bits in the window each time the 
window is in one position. A bit being the result of each 
Exclusive-OR operation is placed In a corresponding el- 
ement position within the second matrix M2. The win- 
dow reaches the uppermost and rightmost position. 
When signal processing related to the window in the up- 
permost and rightmost position is completed, the first 
row in the second matrix M2 is filled with bits c^^, 0^2. 
c.i3, and 0^4- 

[0086] Then, the window is shifted to the second-up- 
permost and leftmost position within the first matrix Ml , 
covering bits b2i , b22, b3^ , and b32. The logical operation 
unit 32 executes Exclusive-OR operation among the bits 
b2i. b22. b3^, and b32. The result of the Exclusive-OR 
operation is a bitC2v The logical operation unit 32 plac- 
es the bit C21 In the second-row first-column element po- 
sition within the second matrix M2. The window is shifted 
rightward by one column. The resultant window covers 
bits b22. b23. b32, and bss. The logical operation unit 32 
executes Exclusive-OR operation among the bits b22, 
^23» ^32' ^33- The result of the Excluslve-OR oper- 
ation is a bit C22* The logical operation unit 32 places the 
bit C22 in the second-row second-column element posi- 
tion within the second matrix M2. During a subsequent 
stage, signal processing similar to the above-mentioned 
signal processing is iterated. Specifically, the window is 
shifted rightward one column by one column, and Ex- 
clusive-OR operation is executed among four bits in the 
window each time the window is in one position. A bit 
being the result of each Excluslve-OR operation is 
placed in a corresponding element position within the 
second matrix M2. The window reaches the second-up- 
permost and rightmost position. When signal process- 
ing related to the window in the second- uppermost and 
rightmost position is completed, the second row in the 
second matrix M2 is filled with bits C21 , C22. 023. and C24. 
[0087] Then, the window is shifted to the third-upper- 
most and leftmost position within the first matrix Ml . 
During a subsequent stage, signal processing similar to 
the above-mentioned signal processing is iterated. Spe- 
cifically, the window is shifted rightward one column by 
one column, and Exclusive-OR operation is executed 
among four bits in the window each time the window is 
in one position. A bit being the result of each Exclusive- 
OR operation Is placed in a corresponding element po- 
sition within the second matrix M2. Rnally, the window 
reaches the lowermost and rightmost position. When 
processes related to the window in the lowermost and 
rightmost position are completed, the second matrix M2 
is filled with bits g^, C12. 0^3, C14, C21. C22, C23, C24, C31, 
C32, C33, C34, C41, C42, C43, and C44, In this way, the sec- 
ond step of Fig. 6 compresses the first matrix M1 into 
the second matrix M2. In other words, the first step com- 
presses 25 bits (one block) into 16 bits. In the second 
step of Fig. 6, the logical operation unit 32 rearranges 
the bits of the second matrix M2 into a fifth bit sequence, 
that is, a sequence of bits c^^, c^2' ^13> ^U' • ^> ^> 



10 



19 



EP1 119 130 A2 



20 



C24. ^31, C32, C33, C4t. C42, C43, and C44. The logical 
operation unit 32 outputs the fifth bit sequence as a 
16-bit portion of a first-key signal (a signal representa- 
tive of a first key KI). In this way. the second step of Fig. 
6 compresses the fourth bit sequence (the 25-brt se- 
quence) into a 16-bit portion of the first-key signal. 
[0088] The second step of Fig. 6 executes the previ- 
ously«mentioned signal processing for each of the 25-bit 
blocks (the fourth bit sequences). In other words, the 
second step repeats the signal processing a predeter- 
mined number of times which is equal to the number of 
the 25-bit blocks (the fourth bit sequences). The repeti- 
tion of the signal processing completes the first-key sig- 
nal. In the case where the number of the 25-bit blocks 
(the fourth bit sequences) is equal to 4. the first-key sig- 
nal is formed by 64 bits. 

[0089] It should be notedthatthe logical operation unit 
32 may output only one fifth bit sequence as the whole 
of the first-key signal. 

[0090] Each Exclusive-OR operation among four bits 
' ^i-i-ij' '^u^iHi window is generally ex- 
pressed as follows. 

Cij = b|^® Vi ©bi^^,eb,^i^^ (2) 
i.j= 1.2.3.4 

where cij denotes a bit being the result of the Exclusive- 
OR operation, and ® denotes an operator of one unit 
portion of the Exdusive-OR operation, 
[0091] Setting the window In the first matrix M1 and 
shifting the window therein mean fomiing bloctcs in the 
first matrix M1 , wherein each of the blocks has bits, the 
number of which is smaller than the number of bits com- 
posing the first matrix M1. Exciusive-OR operation 
among bits in the window means logical operation 
among bits in each of blocks in the first matrix Ml . 
[0092] It should be noted that the second step of Fig. 
6 may divide the third bit sequence generated by the 
first step into blocks each having successive bits, the 
number of which differs from 25. In this case, the number 
of bits composing one fourth bit sequence differs from 
25. Also, the second step may rearrange the bits of each 
fourth bit sequence (each 25-bit sequence) in the first 
matrix MI according to a predetemnined anrangement 
rule different from the previously-mentioned arrange- 
ment rule. The second step may execute OR operation 
or AND operation among four bits In the window instead 
of Exclusive-OR operation. 

[0093] As understood from the previous description, 
the calculators or the key generators 3A and 1 0A imple- 
ment 8-to-4 bit data reduction (compression) in the first 
step, and implement 25-to-16 bit data reduction (com- 
pression) in the second step. The calculators 3A and 
10A may process and compress selected one or ones 
of 8-bit blocks of the first-key base information. In this 
case, the rate of the compression of the first-key base 



infomiation to generate the first-key signal can be 
changed among different values. The first-key base in- 
formation may have a given number of bits which differs 
from a multiple of 8. In this case, the calculators 3A and 

s 1 0A divide the first-key base infomriatton into 8-b(t blocks 
and one remaining block having bits, the number of 
which differs from 8. The calculators 3A and 1 0A discard 
the remaining block. Accordingly, the rate of the com- 
pression of the first-key base Information to generate 

10 the first-key signal can be changed among various val- 
ues. Thus, the calculators 3A and 10A are sufficiently 
flexible regarding a data compression rate. 
[0094] The second embodiment of this invention may 
be modified as follows. Specifically, a modification of the 

IS second embodiment of this Invention implements en- 
cryption through "□" stages, where "n" denotes a prede- 
tenmined natural number equal to or greater than 3. In 
the modification, an n-th encryptor encrypts (n-1)-th key 
base information according to a predetemnined one-way 

so function. 



Claims 

1 . A method of generating key Infomiation , comprising 
the steps of: 

rearranging bits of a first bit sequence tn a first 
matrix according to a predetemriined arrange- 

30 ment rule, the first bit sequence representing 

Infomiation being a base of a key; 
forming blocks in the first matrix, wherein each 
of the blocks has t>its, the number of which \s 
smaller than the number of bits composing the 

35 first matrix: 

executing logical operation among bits in each 
of the blocks and generating a bit being a result 
of the logical operation; 
combining the logicai-operation-resutt bits into 

40 a second bit sequence, wherein the number of 

bits composing the second bit sequence is 
smaller than the number of bits composing the 
first bit sequence; and 

accessing a second matrix composed of prede- 
temiined third bit sequences and reading out 
one from among the third bit sequences in re- 
sponse to the second bit sequence, and output- 
ting the read-out third bit sequence as informa- 
tion representative of the key, wherein the 
50 number of bits composing each of the third bit 

sequences is smaller than the number of bits 
composing the second bit sequence. 

2. An apparatus for generating key information, com- 
5S prising: 

means for rearranging bits of a first bit se- 
quence in a first matrix according to a predeter- 
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mined arrangement rule, the first bit sequence 
representing information being a base of a Icey; 
means for forming blocks in the first matrix, 
wherein each of the blocks has bits, the number 
of which is smailerthan the number of bits com- s 
posing the first matrix; 

means for executing logical operation among 
bits In each of the blocks and generating a bit 
being a result of the logical operation; 
means for combining the logtoal-operatlon-re- 10 
suit bits into a second bit sequence, wherein 
the number of bits composing the second bit se- 
quence is smailerthan the number of bits com- 
posing the first bit sequence; and 
means for accessing a second matrix com- is 
posed of predetermined third bit sequences 
and reading out one from among the third bit 
sequences in response to the second bit se- 
quence, and outputting the read-outthird bit se- 
quence as information representative of the ^ 
key, wherein the number of bits composing 
each of the third bit sequences Is smaller than 
the number of bits composing the second bit se- 
quence. 

25 

A method of encrypting contents information, com- 
prising the steps of: 

generating a signal representative of a key from 
information being a base of the key, the key 30 
base Information including a first bit sequence; 
and 

encrypting contents information in response to 
the key signal; 

wherein the generating step comprises: 35 

1) rearranging bits of the first bit sequence 
in a first matrix according to a predeter- 
mined arrangement rule; 

2) forming blocks in the first matrix, wherein 40 
each of the blocks has bits, the number of 
which is smaller than the number of bits 
composing the first matrix; 

3) executing logical operation among bits 

in each of the blocks and generating a bit 45 
being a result of the logical operation; 

4) combining the logical-operation-result 
bits into a second bit sequence, wherein 
the number of bits composing the second 

bit sequence is smaller than the number of so 
bits composing the first bit sequence; and 

5) accessing a second matrix composed of 
predetermined third bit sequences and 
reading out one from among the third bit 
sequences in response to the second bit ss 
sequence, and outputting the read-out 
third bit sequence as the key signal, where- 
in the number of bits composing each of the 



third bit sequences Is smaller than the 
number of bits composing the second bit 
sequence. 

4. An apparatus for encrypting contents infonmation, 
comprising: 

means for generating a signal representative of 
a key from infomnation being a base of the key, 
the key base information Including a first bit se- 
quence; and 

means for encrypting contents Information in 

response to the key signal; 

wherein the generating means comprises: 

1 ) means for rearranging bits of the first bit 
sequence In a first matrix according to a 
predetermined arrangement rule; 

2) means for forming blocks In the first ma- 
trix, wherein each of the blocks has bits, the 
number of which is smaller than the 
number of bits composing the first matrix; 
3} means for executing logical operation 
among bits in each of the blocks and gen- 
erating a bit being a result of the logical op- 
eration; 

4) means for combining the logical-opera- 
tion-result bits Into a second bit sequence, 
wherein the number of bits composing the 
second bit sequence is smaller than the 
number of bits composing the first bit se- 
quence; and 

5) means for accessing a second matrix 
composed of predetermined third bit se- 
quences and reading out one from among 
the third bit sequences in response to the 
second bit sequence, and outputting the 
read-out third bit sequence as the key sig- 
nal, wherein the number of bits composing 
each of the third bit sequences is smaller 
than the number of bits composing the sec- 
ond bit sequence. 

5. A method of decrypting contents information, com- 
prising the steps of: 

generating a signal representative of a key from 
information being . a base of the key, the key 
base infonnation including a first bit sequence; 
and 

decrypting encryption-resultant contents infor- 
mation in response to the key signal; 
wherein the generating step comprises: 

1 ) rearranging bits of the first bit sequence 
in a first matrix according to a predeter- 
mined arrangement rule; 

2) forming blocks in the first matrix, wherein 
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each of the blocks has bits, the number of 
which is smaller than the number of bits 
composing the first matrix; 

3) executing logical operation among bits 

in each of the blocks and generating a bit s 
being a result of the logical operation; 

4) combining the loglcal-operatlon-result 
bits into a second bit sequence, wherein 
the number of bits composing the second 

bit sequence Is smaller than the number of io 
bits composing the first bit sequence; and 

5) accessing a second matrix composed of 
predetenmtned third bit sequences and 
reading out one from among the third bit 
sequences in response to the second bit is 
sequence, and outputting the read-out 
third bit sequence as the key signal, where- 
in the number of bits composing each of the 
third bit sequences is smaller than the 
number of bits composing the second bit 
sequence. 

An apparatus for decrypting contents infomnation, 
comprising: 

25 

means for generating a signal representative of 
a key from infomiation being a base of the key, 
the key base Information including a first bit se- 
quence; and 

means for decrypting encryption-resultant con- 3o 
tents infomnation in response to the key signal; 
wherein the generating means comprises: 

1) means for rearranging bits of the first bit 
sequence in a first matrix according to a 35 
predetermined arrangement rule; 

2) means for forming blocks in the first ma- 
trix, wherein each of the blocks has bits, the 
number of which is smaller than the 
number of bits composing the first matrix; 40 

3) means for executing logical operation 
among bits in each of the blocks and gen- 
erating a bit being a result of the logk:ai op- 
eration; 

4) means for combining the logical-opera- <s 
tion-result bits into a second bit sequence, 
wherein the number of bits composing the 
second bit sequence is smaller than the 
number of bits composing the first bit se- 
quence; and 50 

5) means for accessing a second matrix 
composed of predetermined third bit se- 
quences and reading out one from among 
the third bit sequences in response to the 
second bit sequence, and outputting the S5 
read-out third bit sequence as the key sig- 
nal, wherein the number of bits composing 
each of the third bit sequences is smaller 



than the number of bits composing the sec- 
ond bit sequence. 

7. A recording medium storing encryption-resultant 
key base information and encryption-resu Kant con- 
tents information generated by the method in claim 
3. 

8. A method of transmitting contents information, com- 
prising the steps of transmitting encryption-result- 
ant key base information through a transmission 
line, and transmitting encryption-resultant contents 
information through the transmission line, the en- 
cryption-resultant contents information being gen- 
erated by the method in claim 3. 

9. A method of generating key information , comprising 
the steps of: 

dividing a first bit sequence into second bit se- 
quences, the first bit sequence being contained 
in information being a base of a key, wherein 
the number of bits composing each of the sec- 
ond bit sequences is smaller than the number 
of bits composing the first bit sequence; 
sequentially accessing a first matrix composed 
of predetermined data pieces and sequentially 
reading out ones from among the predeter- 
mined data pieces in response to the second 
bit sequences; 

combining the read-out data pieces into a third 
bit sequence, wherein the number of bits com- 
posing the third bit sequence is smaller than the 
number of bits composing the first bit se- 
quence; 

rearranging bits of at least part of the third bit 
sequence in a second matrix according to a 
predetenmlned arrangement rule; 
fomnlng blocks In the second matrix, wherein 
each of the blocks has bits, the number of which, 
is smaller than the number of bits composing 
the second matrix; 

executing logical operation among bits in each 
of the blocks and generating a bit being a result 
of the logical operation; and 
combining the iogical-operation-resutt bits into 
a fourth bit sequence, and outputting the fourth 
bit sequence as at least part of information rep- 
resentative of the key, wherein the number of 
bits composing the fourth bit sequence is small- 
er than the number of bits composing the sec- 
ond matrix. 

10. An apparatus for generating key information, com- 
prising: 

means for dividing a first bit sequence into sec- 
• ond bit sequences, the first bit sequence being 
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contained in information being a base of a key. 
wherein the number of bits composing each of 
the second bit sequences is smaller than the 
number of bits composing the first bit se- 
quence; 5 
means for sequentially accessing a first matrix 
composed of predetermined data pieces and 
sequentially reading out ones from among the 
predetermined data pieces in response to the 
second bit sequences; io 
means for combining the read-out data pieces 
into a third bit sequence, wherein the number 
of bits composing the third bit sequence is 
smaller than the number of bits composing the 
first bit sequence; is 
means for rearranging bits of at least part of the 
third bit sequence in a second matrix according 
to a predetemnlned arrangement rule; 
means for fomning blocks in the second matrix, 
wherein each of the blocks has bits, the number 20 
of which is smaller than the number of bits com- 
posing the second matrix; 
means for executing iogica! operation among 
bits in each of the blocks and generating a bit 
being a result of the logical operation; and 25 
means for combining the loglcaf-operation-re- 
sult bits into a fourth bit sequence, and output- 
ting the fourth bit sequence as at least part of 
infonmation representative of the key. wherein 
the number of bits composing the fourth bit se- so 
quence is smaller than the number of bits com- 
posing the second matrix. 

A method of encrypting contents Infomnation, com- 
prising the steps of: 35 

generating a signal representative of a key from 
Information being a base of the key, the key 
base infonmation including a first bit sequence; 
and ^0 
encrypting contents infomnation in response to 
the key signal; 

wherein the generating step comprises: 

1) dividing the first bit sequence into sec- ^5 
ond bit sequences, wherein the number of 
bits composing each of the second bit se- 
quences is smaller than the number of bits 
composing the first bit sequence; 

2) sequentially accessing a first matrix so 
composed of predetermined data pieces 
and sequentially reading out ones from 
among the predetermined data pieces In 
response to the second bit sequences; 

3) combining the read-out data pieces into ss 
a third bit sequence, wherein the number 

of bits composing the third bit sequence is 
smaller than the number of bits composing 



the first bit sequence; 

4) rearranging bits of at least part of the 
third bit sequence in a second matrix ac- 
cording to a predetemnlned an-angement 
rule; 

5) forming blocks in the second matrix, 
wherein each of the blocks has bits, the 
number of which is smaller than the 
number of bits composing the second ma- 
trix; 

6) executing logical operation among bits 
in each of the blocks and generating a bit 
being a result of the logical operation; and 

7) combining the logical -ope ration -result 
bits into a fourth bit sequence, and output- 
ting the fourth bit sequence as at least part 
of the key signal. 

12. An apparatus for encrypting contents information, 
comprising: 

means for generating a signal representative of 
a key f n^m information being a base of the key, 
the key base information including a first bit se- 
quence; and 

means for encrypting contents information In 

response to the key signal; 

wherein the generating means comprises: 

1) means for dividing the first bit sequence 
into second bit sequences, wherein the 
number of bits composing each of the sec- 
ond bit sequences is smaller than the 
number of bits composing the first bit se- 
quence; 

2) means for sequentially accessing a first 
matrix composed of predetemiined data 
pieces and sequentially reading out ones 
from among the predetermined data piec- 
es in response to the second bit sequenc- 
es; 

3) means for combining the read-out data 
pieces into a third bit sequence, wherein 
the number of bits composing the third bit 
sequence is smaller than the number of 
bits composing the first bit sequence; 

4) means for rearranging bits of at least 
part of the third bit sequence in a second 
matrix according to a predetemiined ar- 
rangement rule; 

5) means for forming blocks in the second 
matrix, wherein each of the blocks has bits, 
the number of which Is smaller than the 
number of bits composing the second ma- 
trix; 

6) means for executing logical operation 
among bits in each of the blocks and gen- 
erating a bit being a result of the logical op- 
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eration; and 

7) means for combining the logical-opera- 
tion-resuit bits Into a fourth bit sequence, 
and outputting the fourth bit sequence as 
at least part of the key signal. 

13. A method of decrypting contents infonnatlon, com- 
prising the steps of: 

generating a signal representative of a key from 
information being a base of the key, the key 
base information including a first bit sequence; 
and 

decrypting encryption-resultant contents infor- 
mation in response to the key signal; 
wherein the generating step comprises: 

1) dividing the first bit sequence into sec- 
ond bit sequences, wherein the number of 
bits composing each of the second bit se- 
quences is smaller than the number of bits 
composing the first bit sequence; 

2) sequentially accessing a first matrix 
composed of predetenmined data pieces 
and sequentially reading out ones from 
among the predetemiined data pieces In 
response to the second bit sequences; 

3) combining the read-out data pieces Into 
a third bit sequence, wherein the number 
of bits composing the third bit sequence is 
smaller than the number of bits composing 
the first bit sequence; 

4) rean-anging bits of at least part of the 
third bit sequence In a second matrix ac- 
cording to a predetemilned an-angement 
rule; 

5) fonning blocks in the second matrix, 
wherein each of the blocks has bits, the 
number of which is smaller than the 
number of bits composing the second ma- 
trix; 

6) executing logical operation among bits 
in each of the blocks and generating a bit 
being a result of the logical operation; and 

7) combining the logical-operation-result 
bits into a fourth bit sequence, and output- 
ting the fourth bit sequence as at least part 
of the key signal. 

14. An apparatus for decrypting contents infonnation, 
comprising: 



wherein the generating means comprises: 

1 ) means for dividing the first bit sequence 
Into second bit sequences, wherein the 

s number of bits composing each of the sec- 

ond bit sequences is smaller than the 
number of bits composing the first bit se- 
quence; 

2) means for sequentially accessing a first 
matrix composed of predetennlned data 
pieces and sequentially reading out ones 
from among the predetermined data piec- 
es in response to the second bit sequenc- 
es; 

3) means for combining the read-out data 
pieces into a third bit sequence, wherein 
the number of bits composing the third bit 
sequence is smaller than the number of 
bits composing the first bit sequence; 

4) means for rearranging bits of at least 
part of the third bit sequence in a second 
matrix according to a predetermined ar- 
rangement rule; 

5) means for forming blocks in the second 
matrix, wherein each of the blocks has bits, 
the number of which is smaller than the 
number of bits composing the second ma- 
trix; 

6) means for executing logical operation 
among bits in each of the blocks and gen- 
erating a bit being a result of the logical op- 
eration; and 

7) means for combining the logical-opera- 
tion-result bits Into a fourth bit sequence, 
and outputting the fourth bit sequence as 
at least part of the key signal. 

15. A recording medium storing encryption-resultant 
key base infonnatlon and encryption-resultant con- 
tents inf omnation generated by the method in claim 
11. 

16. A method of transmitting contents Infomnation, com- 
prising the steps of transmitting encryption-result- 
ant key betse information through a transmission 
line, and transmitting encryption-resultant contents 
Infonnation through the transmission line, the en- 
cryption-resultant contents information being gen- 
erated by the method in claim 11 . 
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means for generating a signal representative of 
a key from Information being a base of the key, 
the key base information including a first bit se- ss 
quence; and 

means for decrypting encryption -resultant con- 
tents infomnation in response to the key signal; 
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